CVE-2025-47640 in Printcart Web to Print Product Designer for WooCommerce Plugin

Summary

by MITRE • 05/23/2025

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in printcart Printcart Web to Print Product Designer for WooCommerce allows SQL Injection. This issue affects Printcart Web to Print Product Designer for WooCommerce: from n/a through 2.3.8.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Disclosure: 05/23/2025
• Moderation: accepted
• Entry: VDB-309830
• CPE: ready
• CWE: CWE-89 (confirmed)
• CVSS: 7.3 (VulDB)
• EPSS: 0.00232
• KEV: no
• Activities: very low
• Sector: Transportation, Hostingprovider, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-47640
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-47640
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-47640/